In short: ISO 37301 replaces ISO 19600 and sets requirements for establishing, maintaining and improving a compliance management system.
ISO has published ISO 37301:2021, Compliance management systems — Requirements with guidance for use. It replaces ISO 19600:2014 and, unlike its predecessor, contains requirements that can be certified.
Key elements
- Identification of compliance obligations and compliance risks
- A compliance policy and a compliance function with appropriate independence
- Leadership commitment and a culture of compliance
- Controls, training, communication and raising concerns
- Monitoring, investigation and continual improvement
ISO 37301 is a key reference for governance, risk and compliance professionals — see the Certified GRC Professional (CGRCP) certification.